refactor(dynamic): enhance framework bindings with SSA receiver type checks, add tests for Laravel, Symfony, Rabbit, Kafka, and Pub/Sub

tests/dynamic_fixtures/php_frameworks/laravel/vuln.php

@@ -3,6 +3,27 @@
 // `Route::get('/run', 'UserController@run')` references the
 // controller method whose body shells out without sanitisation.
 
+namespace Illuminate\Support\Facades {
+    class Route
+    {
+        public static function get(string $path, string $callable)
+        {
+            $GLOBALS['__nyx_route'] = function (string $payload) use ($callable) {
+                [$class, $method] = preg_split('/@|::/', $callable);
+                $controller = new $class();
+                return $controller->$method($payload);
+            };
+            return new class {
+                public function middleware($value)
+                {
+                    return $this;
+                }
+            };
+        }
+    }
+}
+
+namespace {
 use Illuminate\Support\Facades\Route;
 
 Route::get('/run', 'UserController@run');
@@ -18,3 +39,4 @@ class UserController
         return $out;
     }
 }
+}